github-user

What github-user does on Frontmcp

AI agents call github-user to retrieve information from Frontmcp without modifying anything. It is typically the context-gathering step in research, monitoring, and reporting workflows, before the agent takes action elsewhere.

Why github-user is rated Low

This tool retrieves publicly available or authorized GitHub user information without creating, modifying, deleting, or executing operations. It is a read-only query operation with minimal blast radius—at worst, an agent could enumerate GitHub users or reveal user profile data, which is typically public or already authorized. No financial, destructive, or code execution implications.

From the tool's definition Tool name 'github-user' and description 'Get GitHub user information' indicate retrieval of data. The phrase 'using upstream OAuth token' confirms authentication context without modifying data.

The rule that runs github-user safely

PolicyLayer is an MCP gateway: it sits between your AI agents and Frontmcp, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For github-user, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "github-user": {}
  }
}

Questions about github-user